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PROGRAM SUB-NETWORK DEVICES WITH AT LEAST TWO 
PARAMETERS (TWO NUMBERS, g AND n) 



CREATE ACCESS CARD THAT INCLUDES FIRST PRIVATE KEY 
(SECURE NUMBER X) 

I 



IMPOSE TIME RESTRICTION ON ACCESS CARD 
(VALID FOR PREDEFINED TIME PERIOD) 



PROVIDE ACCESS CARD TO USER 



SCAN ACCESS CARD BY SUB-NETWORK DEVICES TO 
INFORM SAME OF FIRST PRIVATE KEY (SECURE NUMBER X) 



IDENTIFY MASTER DEVICE FROM AMONG 
SUB-NETWORK DEVICES 



SELECT A SECOND PRIVATE KEY (NUMBER y) BY MASTER 
TO ONLY BE KNOWN TO MASTER 



COMPUTE A PUBLIC KEY (Y = gY MOD n) BY MASTER 



SEND A PUBLIC KEY (Y) OUT OVER NETWORK TO ALL I 

DEVICES ON NETWORK (INCLUDING SUB-NETWORK) | 

"J 
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-214 
-216 
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-220 
-222 
224 
226 



COMPUTE SHARED ENCRYPTION KEY(Z = (gY)* MOD n) 
AND REQUEST ENCRYPTION OF SUBSEQUENT 
MESSAGES BETWEEN SUB-NETWORK DEVICES 
USING SHARED ENCRYPTION KEY (Z) 



REQUEST MAC ID FROM EACH SUB-NETWORK DEVICE 
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RENEW ACCESS CARD (OPTIONAL FEE) AFTER EXPIRATION 
OF PREDEFINED TIME PERIOD 

<35 FIG. 2 
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